LDAP import: groupid may be in 'cn' or 'fullname' attribute.

Handle both cases gracefully.